Overview

DigitalXnode helps clients across industries connect with skilled and relevant talent for their technology and business requirements.

Responsibilities

• Integrate automated security testing tools into CI/CD pipelines and development workflows.
• Conduct threat modelling, risk assessments and security architecture reviews.
• Perform code security reviews, vulnerability assessments and end-to-end security evaluations across applications, APIs and cloud environments.
• Review application and infrastructure configurations against security standards and compliance requirements.
• Assess and harden cloud environments across AWS, Azure and GCP.
• Review container environments including Docker and Kubernetes.
• Work with engineering teams to analyse vulnerabilities and provide practical remediation recommendations.
• Support security audits, gap assessments and compliance reviews.
• Promote secure development practices and a security-first engineering culture.

Qualifications

• 3+ years of relevant hands-on experience in DevSecOps, application security or security engineering.
• Experience integrating tools such as Snyk, SonarQube, Checkmarx, Trivy, ZAP or Semgrep into CI/CD pipelines.
• Previously worked with GitHub Actions, GitLab CI or Jenkins.
• Strong understanding of OWASP and secure coding principles.
• Hands-on experience with manual and automated source code reviews.
• Knowledge of network security, IAM, cryptography, endpoint security and incident response fundamentals.
• Experience identifying vulnerabilities and implementing or recommending fixes.
• Working knowledge of cloud-native and container security.
• Understanding of SAST, DAST, SCA, IAST and container scanning.
• Ability to automate security checks within software delivery workflows.
• Experience reviewing security findings and supporting remediation.
• Experience securing workloads on AWS, Azure and/or GCP.
• Working knowledge of Terraform or CloudFormation.
• Experience with Docker, Kubernetes or containerised environments.
• Ability to review cloud and hosting configurations for security risks.
• Familiarity with ISO 27001, NIST, CIS Benchmarks, SOC 2 and PCI-DSS.
• Understanding of OWASP Top 10.
• Experience conducting gap analyses, security reviews or compliance assessments.
• Strong analytical and problem-solving abilities.
• Ability to investigate security issues and provide practical remediation guidance.
• Good written and verbal communication skills.
• Ability to collaborate with developers, DevOps teams and cloud engineers.
• Experience working with software development and DevOps teams.
• Experience managing vulnerability remediation.
• Experience participating in security audits, assessments or compliance activities.
• Good with documentation as reference records.
• Any Graduate with relevant experience in information security, cybersecurity, DevSecOps or security engineering may be considered.
• A degree in Computer Science, Information Technology, Cybersecurity, Engineering or a related field will be an advantage.
• CISSP, CISA, CEH, GWAPT, OSWE or CSSLP will be an advantage.
• AWS or Azure Security Specialty certifications will be beneficial.

Nice to have

• Experience using Cycode will be an added advantage.
• Scripting or programming skills in Python, Bash, Go or JavaScript.
• Ability to communicate security risks to technical and business stakeholders.